Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersWP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting
HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.5.1 - Cross-Site Request Forgery
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (Subscriber+) SQL Injection
WOOCS – WooCommerce Currency Switcher <= 1.4.1.7 - Cross-Site Request Forgery
Import Export WordPress Users <= 2.5.2 - Authenticated (Shop Manager+) Path Traversal
HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.2 - Authenticated (Admin+) Local File Inclusion
Custom WooCommerce Checkout Fields Editor <= 1.3.0 - Cross-Site Request Forgery
WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection
WC Marketplace <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Klarna Payments for WooCommerce <= 3.2.4 - Missing Authorization
BEAR <= 1.1.4.3 - Missing Authorization
Wholesale For WooCommerce <= 2.3.0 - Unauthenticated Information Exposure
SellKit <= 1.8.1 - Authenticated (Subscriber+) Arbitrary File Download
WP SMS <= 6.6.2 - Cross-Site Request Forgery
PDF Invoices and Packing Slips For WooCommerce <= 1.3.7 - Authenticated (Subscriber+) PHP Object Injection
WholesaleX – WooCommerce Wholesale Plugin (Wholesale Prices, Dynamic Pricing, Tiered Pricing) <= 1.3.2 - Unauthenticated PHP Object Injection
Product Import Export for WooCommerce <= 2.4.1 - Authenticated(Shop Manager+) Arbitrary File Upload
WholesaleX <= 1.3.1 - Sensitive Information Exposure via export_users
WholesaleX <= 1.3.1 - Authenticated(Subscriber+) Missing Authorization via multiple AJAX actions
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.0 - Reflected Cross-Site Scripting
Product Feed PRO for WooCommerce by AdTribes – WooCommerce Product Feeds for Google, Facebook/Meta, Bing, & More <= 13.2.5 - Reflected Cross-Site Scripting
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.4.2 - Reflected Cross-Site Scripting
Preview E-mails for WooCommerce <= 2.2.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.